Re: [ppc64le] Boot failure kernel BUG at mm/usercopy.c:102!

From: Dawei Li
Date: Mon Mar 25 2024 - 14:55:23 EST

Next message: Sasha Levin: "[PATCH 5.15 000/309] 5.15.153-rc2 review"
Previous message: Edgecombe, Rick P: "Re: [PATCH v19 130/130] RFC: KVM: x86, TDX: Add check for KVM_SET_CPUID2"
In reply to: Dawei Li: "Re: [ppc64le] Boot failure kernel BUG at mm/usercopy.c:102!"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi Sachin,

Sorry for the mess.

On Mon, Mar 25, 2024 at 12:08:35PM +0530, Sachin Sant wrote:
> Today’s next (6.9.0-rc1-next-20240325) fails to boot on powerpc:
>
> [ 1.955512] usercopy: Kernel memory exposure attempt detected from SLUB object 'cpumask' (offset 0, size 16)!
> [ 1.955531] ------------[ cut here ]------------
> [ 1.955535] kernel BUG at mm/usercopy.c:102!
> [ 1.955539] Oops: Exception in kernel mode, sig: 5 [#1]
> [ 1.955543] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=8192 NUMA pSeries
> [ 1.955547] Modules linked in:
> [ 1.955551] CPU: 27 PID: 482 Comm: systemd-udevd Not tainted 6.9.0-rc1-next-20240325 #1
> [ 1.955556] Hardware name: IBM,9080-HEX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NH1060_018) hv:phyp pSeries
> [ 1.955561] NIP: c0000000005d08d4 LR: c0000000005d08d0 CTR: 00000000006e638c
> [ 1.955565] REGS: c00000005383f9f0 TRAP: 0700 Not tainted (6.9.0-rc1-next-20240325)
> [ 1.955570] MSR: 8000000000029033 <SF,EE,ME,IR,DR,RI,LE> CR: 2800220f XER: 00000002
> [ 1.955579] CFAR: c0000000002141f0 IRQMASK: 0
> [ 1.955579] GPR00: c0000000005d08d0 c00000005383fc90 c000000001563b00 0000000000000061
> [ 1.955579] GPR04: c000000e855b7c08 c000000e8563e000 c00000005383fad8 0000000e83380000
> [ 1.955579] GPR08: 0000000000000027 c00000000223c030 0000000e83380000 0000000000000001
> [ 1.955579] GPR12: c000000002a37bd0 c000000e87be8300 0000000000000000 0000000000000000
> [ 1.955579] GPR16: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> [ 1.955579] GPR20: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> [ 1.955579] GPR24: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> [ 1.955579] GPR28: 0000000000000001 c000000004017200 0000000000000010 c0000000097129b0
> [ 1.955623] NIP [c0000000005d08d4] usercopy_abort+0x78/0xb0
> [ 1.955630] LR [c0000000005d08d0] usercopy_abort+0x74/0xb0
> [ 1.955634] Call Trace:
> [ 1.955636] [c00000005383fc90] [c0000000005d08d0] usercopy_abort+0x74/0xb0 (unreliable)
> [ 1.955642] [c00000005383fd00] [c0000000005424e4] __check_heap_object+0x1b0/0x1b4
> [ 1.955649] [c00000005383fd40] [c0000000005d0b24] check_heap_object+0x218/0x240
> [ 1.955654] [c00000005383fd80] [c0000000005d0bd0] __check_object_size+0x84/0x1a4
> [ 1.955659] [c00000005383fdc0] [c0000000001c1990] sys_sched_getaffinity+0x114/0x174
> [ 1.955665] [c00000005383fe10] [c000000000033498] system_call_exception+0x138/0x330
> [ 1.955671] [c00000005383fe50] [c00000000000d05c] system_call_vectored_common+0x15c/0x2ec
> [ 1.955678] --- interrupt: 3000 at 0x7fff8ccb72c0
> [ 1.955682] NIP: 00007fff8ccb72c0 LR: 00007fff8ccb72c0 CTR: 0000000000000000
> [ 1.955686] REGS: c00000005383fe80 TRAP: 3000 Not tainted (6.9.0-rc1-next-20240325)
> [ 1.955690] MSR: 800000000280f033 <SF,VEC,VSX,EE,PR,FP,ME,IR,DR,RI,LE> CR: 44002808 XER: 00000000
> [ 1.955700] IRQMASK: 0
> [ 1.955700] GPR00: 00000000000000df 00007fffd97f38a0 00007fff8d337500 0000000000000000
> [ 1.955700] GPR04: 0000000000000010 0000000145511090 0000000145510010 0000000000145511
> [ 1.955700] GPR08: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> [ 1.955700] GPR12: 0000000000000000 00007fff8d3e4c40 0000000110e15770 0000000110e157c8
> [ 1.955700] GPR16: 0000000110e15840 0000000110e15880 0000000110e15800 0000000110e190c0
> [ 1.955700] GPR20: 0000000000000000 0000000000000001 0000000000000001 0000000110e60000
> [ 1.955700] GPR24: 0000000110e60340 0000000110e603c8 0000000110e603c0 0000000110e60058
> [ 1.955700] GPR28: 0000000000000038 0000000000000100 0000000145511090 0000000000000010
> [ 1.955742] NIP [00007fff8ccb72c0] 0x7fff8ccb72c0
> [ 1.955746] LR [00007fff8ccb72c0] 0x7fff8ccb72c0
> [ 1.955749] --- interrupt: 3000
> [ 1.955751] Code: 2c280000 41820050 3ce2ffe6 3d22ffe5 38e77ce8 3929c168 7c661b78 3c62ffe6 f9610060 38637cf0 4bc438dd 60000000 <0fe00000> 3c82ffe4 3ca2ffef 38846510
> [ 1.955765] ---[ end trace 0000000000000000 ]---
> [ 1.957568] pstore: backend (nvram) writing error (-1)
> [ 1.957572]
> [ 2.957575] Kernel panic - not syncing: Fatal exception
> [ 2.963038] Rebooting in 10 seconds..
>
> Git bisect points to following patch
>
> commit 328c801335d5f7edf2a3c9c331ddf8978f21e2a7
> cpumask: create dedicated kmem cache for cpumask var
>
> Have attached the boot log and .config

> Detected machine type: 0000000000000101
> command line: BOOT_IMAGE=(ieee1275//vdevice/v-scsi@30000066/disk@8100000000000000,msdos3)/boot/vmlinuz-6.9.0-rc1-next-20240325 root=UUID=031d530b-fe65-448d-ba13-558989868c84 ro crashkernel=2G-4G:384M,4G-16G:512M,16G-64G:1G,64G-128G:2G,128G-:4G
> Max number of cores passed to firmware: 1024 (NR_CPUS = 8192)
> Calling ibm,client-architecture-support... done
> memory layout at init:
> memory_limit : 0000000000000000 (16 MB aligned)
> alloc_bottom : 000000000f9e0000
> alloc_top : 0000000020000000
> alloc_top_hi : 0000000020000000
> rmo_top : 0000000020000000
> ram_top : 0000000020000000
> instantiating rtas at 0x000000001ec10000... done
> instantiating sml at 0x000000001ec00000... done
> prom_hold_cpus: skipped
> copying OF device tree...
> Building dt strings...
> Building dt structure...
> Device tree strings 0x00000000119f0000 -> 0x00000000119f1838
> Device tree struct 0x0000000011a00000 -> 0x0000000011a10000
> Quiescing Open Firmware ...
> Booting Linux via __start() @ 0x000000000a720000 ...
> [ 0.000000] Reserving 1024MB of memory at 256MB for crashkernel (System RAM: 61440MB)
> [ 0.000000] radix-mmu: Page sizes from device-tree:
> [ 0.000000] radix-mmu: Page size shift = 12 AP=0x0
> [ 0.000000] radix-mmu: Page size shift = 16 AP=0x5
> [ 0.000000] radix-mmu: Page size shift = 21 AP=0x1
> [ 0.000000] radix-mmu: Page size shift = 30 AP=0x2
> [ 0.000000] Activating Kernel Userspace Access Prevention
> [ 0.000000] Activating Kernel Userspace Execution Prevention
> [ 0.000000] radix-mmu: Mapped 0x0000000000000000-0x0000000002720000 with 64.0 KiB pages (exec)
> [ 0.000000] radix-mmu: Mapped 0x0000000002720000-0x0000000f00000000 with 64.0 KiB pages
> [ 0.000000] lpar: Using radix MMU under hypervisor
> [ 0.000000] Linux version 6.9.0-rc1-next-20240325 (root@xxxxxxxxxxxxxxxxxxx) (gcc (GCC) 11.4.1 20231218 (Red Hat 11.4.1-3), GNU ld version 2.35.2-43.el9) #1 SMP Sun Mar 24 22:33:26 CDT 2024
> [ 0.000000] Found initrd at 0xc00000000d900000:0xc00000000f9da580
> [ 0.000000] Hardware name: IBM,9080-HEX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NH1060_018) hv:phyp pSeries
> [ 0.000000] printk: legacy bootconsole [udbg0] enabled
> [ 0.000000] Partition configured for 128 cpus.
> [ 0.000000] CPU maps initialized for 8 threads per core
> [ 0.000000] numa: Partition configured for 32 NUMA nodes.
> [ 0.000000] -----------------------------------------------------
> [ 0.000000] phys_mem_size = 0xf00000000
> [ 0.000000] dcache_bsize = 0x80
> [ 0.000000] icache_bsize = 0x80
> [ 0.000000] cpu_features = 0x001c00eb8f5f9187
> [ 0.000000] possible = 0x001ffbfbcf5fb187
> [ 0.000000] always = 0x0000000380008181
> [ 0.000000] cpu_user_features = 0xdc0065c2 0xaef60000
> [ 0.000000] mmu_features = 0xbc007641
> [ 0.000000] firmware_features = 0x00001dbfc45bfc57
> [ 0.000000] vmalloc start = 0xc008000000000000
> [ 0.000000] IO start = 0xc00a000000000000
> [ 0.000000] vmemmap start = 0xc00c000000000000
> [ 0.000000] -----------------------------------------------------
> [ 0.000000] numa: NODE_DATA [mem 0xe85b0ee80-0xe85b1667f]
> [ 0.000000] rfi-flush: fallback displacement flush available
> [ 0.000000] count-cache-flush: hardware flush enabled.
> [ 0.000000] link-stack-flush: software flush enabled.
> [ 0.000000] stf-barrier: eieio barrier available
> [ 0.000000] PPC64 nvram contains 15360 bytes
> [ 0.000000] barrier-nospec: using ORI speculation barrier
> [ 0.000000] Zone ranges:
> [ 0.000000] Normal [mem 0x0000000000000000-0x0000000effffffff]
> [ 0.000000] Device empty
> [ 0.000000] Movable zone start for each node
> [ 0.000000] Early memory node ranges
> [ 0.000000] node 3: [mem 0x0000000000000000-0x0000000effffffff]
> [ 0.000000] Initmem setup node 0 as memoryless
> [ 0.000000] Initmem setup node 1 as memoryless
> [ 0.000000] Initmem setup node 2 as memoryless
> [ 0.000000] Initmem setup node 3 [mem 0x0000000000000000-0x0000000effffffff]
> [ 0.000000] Initmem setup node 4 as memoryless
> [ 0.000000] Initmem setup node 5 as memoryless
> [ 0.000000] Initmem setup node 6 as memoryless
> [ 0.000000] Initmem setup node 7 as memoryless
> [ 0.000000] Initmem setup node 8 as memoryless
> [ 0.000000] Initmem setup node 9 as memoryless
> [ 0.000000] Initmem setup node 10 as memoryless
> [ 0.000000] Initmem setup node 11 as memoryless
> [ 0.000000] Initmem setup node 12 as memoryless
> [ 0.000000] Initmem setup node 13 as memoryless
> [ 0.000000] Initmem setup node 14 as memoryless
> [ 0.000000] Initmem setup node 15 as memoryless
> [ 0.000000] Initmem setup node 16 as memoryless
> [ 0.000000] Initmem setup node 17 as memoryless
> [ 0.000000] Initmem setup node 18 as memoryless
> [ 0.000000] Initmem setup node 19 as memoryless
> [ 0.000000] Initmem setup node 20 as memoryless
> [ 0.000000] Initmem setup node 21 as memoryless
> [ 0.000000] Initmem setup node 22 as memoryless
> [ 0.000000] Initmem setup node 23 as memoryless
> [ 0.000000] Initmem setup node 24 as memoryless
> [ 0.000000] Initmem setup node 25 as memoryless
> [ 0.000000] Initmem setup node 26 as memoryless
> [ 0.000000] Initmem setup node 27 as memoryless
> [ 0.000000] Initmem setup node 28 as memoryless
> [ 0.000000] Initmem setup node 29 as memoryless
> [ 0.000000] Initmem setup node 30 as memoryless
> [ 0.000000] Initmem setup node 31 as memoryless
> [ 0.000000] percpu: cpu 32 has no node 0 or node-local memory
> [ 0.000000] percpu: Embedded 10 pages/cpu s613160 r0 d42200 u655360
> [ 0.000000] Kernel command line: BOOT_IMAGE=(ieee1275//vdevice/v-scsi@30000066/disk@8100000000000000,msdos3)/boot/vmlinuz-6.9.0-rc1-next-20240325 root=UUID=031d530b-fe65-448d-ba13-558989868c84 ro crashkernel=2G-4G:384M,4G-16G:512M,16G-64G:1G,64G-128G:2G,128G-:4G
> [ 0.000000] Unknown kernel command line parameters "BOOT_IMAGE=(ieee1275//vdevice/v-scsi@30000066/disk@8100000000000000,msdos3)/boot/vmlinuz-6.9.0-rc1-next-20240325", will be passed to user space.
> [ 0.000000] random: crng init done
> [ 0.000000] Dentry cache hash table entries: 8388608 (order: 10, 67108864 bytes, linear)
> [ 0.000000] Inode-cache hash table entries: 4194304 (order: 9, 33554432 bytes, linear)
> [ 0.000000] Fallback order for Node 0: 3
> [ 0.000000] Fallback order for Node 1: 3
> [ 0.000000] Fallback order for Node 2: 3
> [ 0.000000] Fallback order for Node 3: 3
> [ 0.000000] Fallback order for Node 4: 3
> [ 0.000000] Fallback order for Node 5: 3
> [ 0.000000] Fallback order for Node 6: 3
> [ 0.000000] Fallback order for Node 7: 3
> [ 0.000000] Fallback order for Node 8: 3
> [ 0.000000] Fallback order for Node 9: 3
> [ 0.000000] Fallback order for Node 10: 3
> [ 0.000000] Fallback order for Node 11: 3
> [ 0.000000] Fallback order for Node 12: 3
> [ 0.000000] Fallback order for Node 13: 3
> [ 0.000000] Fallback order for Node 14: 3
> [ 0.000000] Fallback order for Node 15: 3
> [ 0.000000] Fallback order for Node 16: 3
> [ 0.000000] Fallback order for Node 17: 3
> [ 0.000000] Fallback order for Node 18: 3
> [ 0.000000] Fallback order for Node 19: 3
> [ 0.000000] Fallback order for Node 20: 3
> [ 0.000000] Fallback order for Node 21: 3
> [ 0.000000] Fallback order for Node 22: 3
> [ 0.000000] Fallback order for Node 23: 3
> [ 0.000000] Fallback order for Node 24: 3
> [ 0.000000] Fallback order for Node 25: 3
> [ 0.000000] Fallback order for Node 26: 3
> [ 0.000000] Fallback order for Node 27: 3
> [ 0.000000] Fallback order for Node 28: 3
> [ 0.000000] Fallback order for Node 29: 3
> [ 0.000000] Fallback order for Node 30: 3
> [ 0.000000] Fallback order for Node 31: 3
> [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 983040
> [ 0.000000] Policy zone: Normal
> [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
> [ 0.000000] Memory: 59497664K/62914560K available (16768K kernel code, 6144K rwdata, 16000K rodata, 7296K init, 2933K bss, 3416896K reserved, 0K cma-reserved)
> [ 0.000000] SLUB: HWalign=128, Order=0-3, MinObjects=0, CPUs=128, Nodes=32
> [ 0.000000] ftrace: allocating 42889 entries in 16 pages
> [ 0.000000] ftrace: allocated 16 pages with 1 groups
> [ 0.000000] trace event string verifier disabled
> [ 0.000000] rcu: Hierarchical RCU implementation.
> [ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=128.
> [ 0.000000] Rude variant of Tasks RCU enabled.
> [ 0.000000] Tracing variant of Tasks RCU enabled.
> [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
> [ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128
> [ 0.000000] RCU Tasks Rude: Setting shift to 7 and lim to 1 rcu_task_cb_adjust=1.
> [ 0.000000] RCU Tasks Trace: Setting shift to 7 and lim to 1 rcu_task_cb_adjust=1.
> [ 0.000000] NR_IRQS: 512, nr_irqs: 512, preallocated irqs: 16
> [ 0.000000] xive: Using IRQ range [400000-40007f]
> [ 0.000000] xive: Interrupt handling initialized with spapr backend
> [ 0.000000] xive: Using priority 7 for all interrupts
> [ 0.000000] xive: Using 64kB queues
> [ 0.000000] rcu: srcu_init: Setting srcu_struct sizes to big.
> [ 0.000001] time_init: 56 bit decrementer (max: 7fffffffffffff)
> [ 0.000027] clocksource: timebase: mask: 0xffffffffffffffff max_cycles: 0x761537d007, max_idle_ns: 440795202126 ns
> [ 0.000072] clocksource: timebase mult[1f40000] shift[24] registered
> [ 0.000486] kfence: initialized - using 33554432 bytes for 255 objects at 0x(____ptrval____)-0x(____ptrval____)
> [ 0.000690] Console: colour dummy device 80x25
> [ 0.000714] printk: legacy console [hvc0] enabled
> [ 0.000714] printk: legacy console [hvc0] enabled
> [ 0.000738] printk: legacy bootconsole [udbg0] disabled
> [ 0.000738] printk: legacy bootconsole [udbg0] disabled
> [ 0.000863] pid_max: default: 131072 minimum: 1024
> [ 0.001087] LSM: initializing lsm=capability,yama,selinux,bpf,ima,evm
> [ 0.001211] Yama: becoming mindful.
> [ 0.001216] SELinux: Initializing.
> [ 0.001559] LSM support for eBPF active
> [ 0.001712] Mount-cache hash table entries: 131072 (order: 4, 1048576 bytes, linear)
> [ 0.001779] Mountpoint-cache hash table entries: 131072 (order: 4, 1048576 bytes, linear)
> [ 0.003310] POWER10 performance monitor hardware support registered
> [ 0.003360] rcu: Hierarchical SRCU implementation.
> [ 0.003363] rcu: Max phase no-delay instances is 1000.
> [ 0.004414] smp: Bringing up secondary CPUs ...
> [ 0.013595] smp: Brought up 1 node, 32 CPUs
> [ 0.013611] numa: Node 3 CPUs: 0-31
> [ 0.013617] Big cores detected but using small core scheduling
> [ 0.016579] devtmpfs: initialized
> [ 0.019320] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
> [ 0.019329] futex hash table entries: 32768 (order: 6, 4194304 bytes, linear)
> [ 0.024979] NET: Registered PF_NETLINK/PF_ROUTE protocol family
> [ 0.025317] audit: initializing netlink subsys (disabled)
> [ 0.025395] audit: type=2000 audit(1711337745.020:1): state=initialized audit_enabled=0 res=1
> [ 0.025471] thermal_sys: Registered thermal governor 'fair_share'
> [ 0.025472] thermal_sys: Registered thermal governor 'step_wise'
> [ 0.025511] cpuidle: using governor menu
> [ 0.025869] pstore: Using crash dump compression: deflate
> [ 0.025873] pstore: Registered nvram as persistent store backend
> [ 0.026416] EEH: pSeries platform initialized
> [ 0.026546] plpks: POWER LPAR Platform KeyStore is not supported or enabled
> [ 0.032088] kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible.
> [ 0.032488] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
> [ 0.032495] HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page
> [ 0.032502] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages
> [ 0.032507] HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page
> [ 0.057077] Demotion targets for Node 3: null
> [ 0.057246] cryptd: max_cpu_qlen set to 1000
> [ 0.057643] iommu: Default domain type: Translated
> [ 0.057647] iommu: DMA domain TLB invalidation policy: strict mode
> [ 0.057742] SCSI subsystem initialized
> [ 0.057770] usbcore: registered new interface driver usbfs
> [ 0.057778] usbcore: registered new interface driver hub
> [ 0.057811] usbcore: registered new device driver usb
> [ 0.057835] pps_core: LinuxPPS API ver. 1 registered
> [ 0.057838] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@xxxxxxxx>
> [ 0.057844] PTP clock support registered
> [ 0.057977] EDAC MC: Ver: 3.0.0
> [ 0.058230] NetLabel: Initializing
> [ 0.058234] NetLabel: domain hash size = 128
> [ 0.058237] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
> [ 0.058250] NetLabel: unlabeled traffic allowed by default
> [ 0.058260] PCI: Probing PCI hardware
> [ 0.058265] EEH: No capable adapters found: recovery disabled.
> [ 0.058327] vgaarb: loaded
> [ 0.058601] clocksource: Switched to clocksource timebase
> [ 0.059091] VFS: Disk quotas dquot_6.6.0
> [ 0.059136] VFS: Dquot-cache hash table entries: 8192 (order 0, 65536 bytes)
> [ 0.060960] NET: Registered PF_INET protocol family
> [ 0.061108] IP idents hash table entries: 262144 (order: 5, 2097152 bytes, linear)
> [ 0.063857] tcp_listen_portaddr_hash hash table entries: 32768 (order: 3, 524288 bytes, linear)
> [ 0.063900] Table-perturb hash table entries: 65536 (order: 2, 262144 bytes, linear)
> [ 0.063938] TCP established hash table entries: 524288 (order: 6, 4194304 bytes, linear)
> [ 0.064377] TCP bind hash table entries: 65536 (order: 5, 2097152 bytes, linear)
> [ 0.064533] TCP: Hash tables configured (established 524288 bind 65536)
> [ 0.064851] MPTCP token hash table entries: 65536 (order: 4, 1572864 bytes, linear)
> [ 0.064928] UDP hash table entries: 32768 (order: 4, 1048576 bytes, linear)
> [ 0.064995] UDP-Lite hash table entries: 32768 (order: 4, 1048576 bytes, linear)
> [ 0.065225] NET: Registered PF_UNIX/PF_LOCAL protocol family
> [ 0.065235] NET: Registered PF_XDP protocol family
> [ 0.065242] PCI: CLS 0 bytes, default 128
> [ 0.065298] Trying to unpack rootfs image as initramfs...
> [ 0.071685] IOMMU table initialized, virtual merging enabled
> [ 0.102816] vio_register_device_node: node lid missing 'reg'
> [ 0.103002] vas: GZIP feature is available
> [ 0.103636] hv-24x7: read 548 catalog entries, created 387 event attrs (0 failures), 387 descs
> [ 0.111665] Initialise system trusted keyrings
> [ 0.111750] workingset: timestamp_bits=38 max_order=20 bucket_order=0
> [ 0.111771] zbud: loaded
> [ 0.120518] NET: Registered PF_ALG protocol family
> [ 0.120525] Key type asymmetric registered
> [ 0.120528] Asymmetric key parser 'x509' registered
> [ 0.470285] Freeing initrd memory: 33600K
> [ 0.472902] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 245)
> [ 0.472986] io scheduler mq-deadline registered
> [ 0.472991] io scheduler kyber registered
> [ 0.473006] io scheduler bfq registered
> [ 0.474368] atomic64_test: passed
> [ 0.474585] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4
> [ 0.474589] PowerPC PowerNV PCI Hotplug Driver version: 0.1
> [ 0.474943] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
> [ 0.475494] tpm_ibmvtpm 30000003: CRQ initialization completed
> [ 1.522948] rdac: device handler registered
> [ 1.522995] hp_sw: device handler registered
> [ 1.523001] emc: device handler registered
> [ 1.523054] alua: device handler registered
> [ 1.523259] usbcore: registered new interface driver usbserial_generic
> [ 1.523267] usbserial: USB Serial support registered for generic
> [ 1.523302] mousedev: PS/2 mouse device common for all mice
> [ 1.523377] rtc-generic rtc-generic: registered as rtc0
> [ 1.523406] rtc-generic rtc-generic: setting system clock to 2024-03-25T03:35:47 UTC (1711337747)
> [ 1.523481] xcede: xcede_record_size = 10
> [ 1.523485] xcede: Record 0 : hint = 1, latency = 0x1800 tb ticks, Wake-on-irq = 1
> [ 1.523489] xcede: Record 1 : hint = 2, latency = 0x3c00 tb ticks, Wake-on-irq = 0
> [ 1.523493] cpuidle: Skipping the 2 Extended CEDE idle states
> [ 1.523497] cpuidle: Fixed up CEDE exit latency to 12 us
> [ 1.524709] nx_compress_pseries ibm,compression-v1: nx842_OF_upd: max_sync_size new:65536 old:0
> [ 1.524715] nx_compress_pseries ibm,compression-v1: nx842_OF_upd: max_sync_sg new:510 old:0
> [ 1.524720] nx_compress_pseries ibm,compression-v1: nx842_OF_upd: max_sg_len new:4080 old:0
> [ 1.524790] hid: raw HID events driver (C) Jiri Kosina
> [ 1.524810] usbcore: registered new interface driver usbhid
> [ 1.524814] usbhid: USB HID core driver
> [ 1.524856] drop_monitor: Initializing network drop monitor service
> [ 1.524934] Initializing XFRM netlink socket
> [ 1.524989] NET: Registered PF_INET6 protocol family
> [ 1.525423] Segment Routing with IPv6
> [ 1.525433] In-situ OAM (IOAM) with IPv6
> [ 1.525452] NET: Registered PF_PACKET protocol family
> [ 1.525483] mpls_gso: MPLS GSO support
> [ 1.525518] secvar-sysfs: Failed to retrieve secvar operations
> [ 1.526806] Timer migration: 3 hierarchy levels; 8 children per group; 1 crossnode level
> [ 1.527403] registered taskstats version 1
> [ 1.528553] Loading compiled-in X.509 certificates
> [ 1.530692] page_owner is disabled
> [ 1.530727] Key type big_key registered
> [ 1.532801] Key type trusted registered
> [ 1.540856] Key type encrypted registered
> [ 1.540877] Secure boot mode disabled
> [ 1.540884] Loading compiled-in module X.509 certificates
> [ 1.598319] Loaded X.509 cert 'Build time autogenerated kernel key: d12614b9e6e3723303747cae267b693449629cdc'
> [ 1.598328] ima: Allocated hash algorithm: sha256
> [ 1.609426] Secure boot mode disabled
> [ 1.609439] Trusted boot mode disabled
> [ 1.609442] ima: No architecture policies found
> [ 1.609453] evm: Initialising EVM extended attributes:
> [ 1.609457] evm: security.selinux
> [ 1.609459] evm: security.SMACK64 (disabled)
> [ 1.609462] evm: security.SMACK64EXEC (disabled)
> [ 1.609465] evm: security.SMACK64TRANSMUTE (disabled)
> [ 1.609467] evm: security.SMACK64MMAP (disabled)
> [ 1.609470] evm: security.apparmor (disabled)
> [ 1.609472] evm: security.ima
> [ 1.609474] evm: security.capability
> [ 1.609477] evm: HMAC attrs: 0x1
> [ 1.609514] alg: No test for 842 (842-nx)
> [ 1.734120] clk: Disabling unused clocks
> [ 1.735436] Freeing unused kernel image (initmem) memory: 7296K
> [ 1.747144] Checked W+X mappings: passed, no W+X pages found
> [ 1.747157] Run /init as init process
> [ 1.752966] systemd[1]: systemd 252-27.el9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT +GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN -IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY +P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK +XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified)
> [ 1.752987] systemd[1]: Detected virtualization powervm.
> [ 1.752993] systemd[1]: Detected architecture ppc64-le.
> [ 1.752998] systemd[1]: Running in initrd.
>
> Welcome to [0;31mRed Hat Enterprise Linux 9.4 Beta (Plow) dracut-057-53.git20240104.el9 (Initramfs)[0m!
>
> [ 1.753113] systemd[1]: Hostname set to <xxxx.xxxx.xxxx.xxxx>.
> [ 1.866859] systemd[1]: Queued start job for default target Initrd Default Target.
> [ 1.867012] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
> [[0;32m OK [0m] Started [0;1;39mDispatch Password ???ts to Console Directory Watch[0m.
> [ 1.867153] systemd[1]: Reached target Initrd /usr File System.
> [[0;32m OK [0m] Reached target [0;1;39mInitrd /usr File System[0m.
> [ 1.867203] systemd[1]: Reached target Local File Systems.
> [[0;32m OK [0m] Reached target [0;1;39mLocal File Systems[0m.
> [ 1.867244] systemd[1]: Reached target Path Units.
> [[0;32m OK [0m] Reached target [0;1;39mPath Units[0m.
> [ 1.867291] systemd[1]: Reached target Slice Units.
> [[0;32m OK [0m] Reached target [0;1;39mSlice Units[0m.
> [ 1.867334] systemd[1]: Reached target Swaps.
> [[0;32m OK [0m] Reached target [0;1;39mSwaps[0m.
> [ 1.867377] systemd[1]: Reached target Timer Units.
> [[0;32m OK [0m] Reached target [0;1;39mTimer Units[0m.
> [ 1.867470] systemd[1]: Listening on D-Bus System Message Bus Socket.
> [[0;32m OK [0m] Listening on [0;1;39mD-Bus System Message Bus Socket[0m.
> [ 1.867570] systemd[1]: Listening on Journal Socket (/dev/log).
> [[0;32m OK [0m] Listening on [0;1;39mJournal Socket (/dev/log)[0m.
> [ 1.867670] systemd[1]: Listening on Journal Socket.
> [[0;32m OK [0m] Listening on [0;1;39mJournal Socket[0m.
> [ 1.867772] systemd[1]: Listening on udev Control Socket.
> [[0;32m OK [0m] Listening on [0;1;39mudev Control Socket[0m.
> [ 1.867853] systemd[1]: Listening on udev Kernel Socket.
> [[0;32m OK [0m] Listening on [0;1;39mudev Kernel Socket[0m.
> [ 1.867897] systemd[1]: Reached target Socket Units.
> [[0;32m OK [0m] Reached target [0;1;39mSocket Units[0m.
> [ 1.869788] systemd[1]: Starting Create List of Static Device Nodes...
> Starting [0;1;39mCreate List of Static Device Nodes[0m...
> [ 1.871108] systemd[1]: Starting Journal Service...
> Starting [0;1;39mJournal Service[0m...
> [ 1.871251] systemd[1]: Load Kernel Modules was skipped because no trigger condition checks were met.
> [ 1.872049] systemd[1]: Starting Apply Kernel Variables...
> Starting [0;1;39mApply Kernel Variables[0m...
> [ 1.872857] systemd[1]: Starting Create System Users...
> Starting [0;1;39mCreate System Users[0m...
> [ 1.873773] systemd[1]: Starting Setup Virtual Console...
> Starting [0;1;39mSetup Virtual Console[0m...
> [ 1.874925] systemd[1]: Finished Create List of Static Device Nodes.
> [[0;32m OK [0m] Finished [0;1;39mCreate List of Static Device Nodes[0m.
> [ 1.876623] systemd[1]: Finished Apply Kernel Variables.
> [[0;32m OK [0m] Finished [0;1;39mApply Kernel Variables[0m.
> [ 1.878887] systemd[1]: Finished Create System Users.
> [[0;32m OK [0m] Finished [0;1;39mCreate System Users[0m.
> [ 1.879875] systemd[1]: Starting Create Static Device Nodes in /dev...
> Starting [0;1;39mCreate Static Device Nodes in /dev[0m...
> [ 1.884120] systemd[1]: Finished Create Static Device Nodes in /dev.
> [[0;32m OK [0m] Finished [0;1;39mCreate Static Device Nodes in /dev[0m.
> [ 1.885620] systemd[1]: Started Journal Service.
> [[0;32m OK [0m] Started [0;1;39mJournal Service[0m.
> Starting [0;1;39mCreate Volatile Files and Directories[0m...
> [[0;32m OK [0m] Finished [0;1;39mCreate Volatile Files and Directories[0m.
> [[0;32m OK [0m] Finished [0;1;39mSetup Virtual Console[0m.
> Starting [0;1;39mdracut cmdline hook[0m...
> [[0;32m OK [0m] Finished [0;1;39mdracut cmdline hook[0m.
> Starting [0;1;39mdracut pre-udev hook[0m...
> [[0;32m OK [0m] Finished [0;1;39mdracut pre-udev hook[0m.
> Starting [0;1;39mRule-based Manage???for Device Events and Files[0m...
> [ 1.955512] usercopy: Kernel memory exposure attempt detected from SLUB object 'cpumask' (offset 0, size 16)!
> [ 1.955531] ------------[ cut here ]------------
> [ 1.955535] kernel BUG at mm/usercopy.c:102!
> [ 1.955539] Oops: Exception in kernel mode, sig: 5 [#1]
> [ 1.955543] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=8192 NUMA pSeries
> [ 1.955547] Modules linked in:
> [ 1.955551] CPU: 27 PID: 482 Comm: systemd-udevd Not tainted 6.9.0-rc1-next-20240325 #1
> [ 1.955556] Hardware name: IBM,9080-HEX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NH1060_018) hv:phyp pSeries
> [ 1.955561] NIP: c0000000005d08d4 LR: c0000000005d08d0 CTR: 00000000006e638c
> [ 1.955565] REGS: c00000005383f9f0 TRAP: 0700 Not tainted (6.9.0-rc1-next-20240325)
> [ 1.955570] MSR: 8000000000029033 <SF,EE,ME,IR,DR,RI,LE> CR: 2800220f XER: 00000002
> [ 1.955579] CFAR: c0000000002141f0 IRQMASK: 0
> [ 1.955579] GPR00: c0000000005d08d0 c00000005383fc90 c000000001563b00 0000000000000061
> [ 1.955579] GPR04: c000000e855b7c08 c000000e8563e000 c00000005383fad8 0000000e83380000
> [ 1.955579] GPR08: 0000000000000027 c00000000223c030 0000000e83380000 0000000000000001
> [ 1.955579] GPR12: c000000002a37bd0 c000000e87be8300 0000000000000000 0000000000000000
> [ 1.955579] GPR16: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> [ 1.955579] GPR20: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> [ 1.955579] GPR24: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> [ 1.955579] GPR28: 0000000000000001 c000000004017200 0000000000000010 c0000000097129b0
> [ 1.955623] NIP [c0000000005d08d4] usercopy_abort+0x78/0xb0
> [ 1.955630] LR [c0000000005d08d0] usercopy_abort+0x74/0xb0
> [ 1.955634] Call Trace:
> [ 1.955636] [c00000005383fc90] [c0000000005d08d0] usercopy_abort+0x74/0xb0 (unreliable)
> [ 1.955642] [c00000005383fd00] [c0000000005424e4] __check_heap_object+0x1b0/0x1b4
> [ 1.955649] [c00000005383fd40] [c0000000005d0b24] check_heap_object+0x218/0x240
> [ 1.955654] [c00000005383fd80] [c0000000005d0bd0] __check_object_size+0x84/0x1a4
> [ 1.955659] [c00000005383fdc0] [c0000000001c1990] sys_sched_getaffinity+0x114/0x174
> [ 1.955665] [c00000005383fe10] [c000000000033498] system_call_exception+0x138/0x330
> [ 1.955671] [c00000005383fe50] [c00000000000d05c] system_call_vectored_common+0x15c/0x2ec
> [ 1.955678] --- interrupt: 3000 at 0x7fff8ccb72c0
> [ 1.955682] NIP: 00007fff8ccb72c0 LR: 00007fff8ccb72c0 CTR: 0000000000000000
> [ 1.955686] REGS: c00000005383fe80 TRAP: 3000 Not tainted (6.9.0-rc1-next-20240325)
> [ 1.955690] MSR: 800000000280f033 <SF,VEC,VSX,EE,PR,FP,ME,IR,DR,RI,LE> CR: 44002808 XER: 00000000
> [ 1.955700] IRQMASK: 0
> [ 1.955700] GPR00: 00000000000000df 00007fffd97f38a0 00007fff8d337500 0000000000000000
> [ 1.955700] GPR04: 0000000000000010 0000000145511090 0000000145510010 0000000000145511
> [ 1.955700] GPR08: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> [ 1.955700] GPR12: 0000000000000000 00007fff8d3e4c40 0000000110e15770 0000000110e157c8
> [ 1.955700] GPR16: 0000000110e15840 0000000110e15880 0000000110e15800 0000000110e190c0
> [ 1.955700] GPR20: 0000000000000000 0000000000000001 0000000000000001 0000000110e60000
> [ 1.955700] GPR24: 0000000110e60340 0000000110e603c8 0000000110e603c0 0000000110e60058
> [ 1.955700] GPR28: 0000000000000038 0000000000000100 0000000145511090 0000000000000010
> [ 1.955742] NIP [00007fff8ccb72c0] 0x7fff8ccb72c0
> [ 1.955746] LR [00007fff8ccb72c0] 0x7fff8ccb72c0
> [ 1.955749] --- interrupt: 3000
> [ 1.955751] Code: 2c280000 41820050 3ce2ffe6 3d22ffe5 38e77ce8 3929c168 7c661b78 3c62ffe6 f9610060 38637cf0 4bc438dd 60000000 <0fe00000> 3c82ffe4 3ca2ffef 38846510
> [ 1.955765] ---[ end trace 0000000000000000 ]---
> [ 1.957568] pstore: backend (nvram) writing error (-1)
> [ 1.957572]
> [ 2.957575] Kernel panic - not syncing: Fatal exception
> [ 2.963038] Rebooting in 10 seconds..

It was odd that my previous reply didn't make it to lore, so I guess I
should resend it.

[cc Andrew]

Hi Andrew,

Can you please drop this commit from non-mm tree? Or an explicit revert
patch should be submitted from me?

Again, really sorry for this.

Thanks,

Dawei
>
>
> -- Sachin

Next message: Sasha Levin: "[PATCH 5.15 000/309] 5.15.153-rc2 review"
Previous message: Edgecombe, Rick P: "Re: [PATCH v19 130/130] RFC: KVM: x86, TDX: Add check for KVM_SET_CPUID2"
In reply to: Dawei Li: "Re: [ppc64le] Boot failure kernel BUG at mm/usercopy.c:102!"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]